Casdoor review
A free, self-hosted OAuth and identity platform with broad protocol support.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Casdoor is an open-source identity and access management platform for organizations building web applications, APIs, and AI-agent workflows. It provides OAuth 2.0 authorization and token issuance, OpenID Connect authentication, SAML 2.0 identity provider support, LDAP and SCIM integration, and a web administration interface. The platform supports deployment on Windows, Linux, and macOS, along with API-based integration and self-hosting.
Casdoor's free, self-hosted model suits teams that want control over deployment and identity infrastructure without a paid license. Its protocol coverage extends beyond OAuth: client credentials support machine-to-machine authentication, RFC 7662 enables token introspection, and role-, attribute-, and access-control policies support more detailed authorization requirements. MFA and WebAuthn add authentication options, while user, organization, and application management provide administrative scope.
Integration options include Google, GitHub, WeChat, Azure AD, and Amazon S3. Casdoor also exposes a REST API and SDK integration for applications, scripts, and service-to-service authentication. The trade-off is focus: organizations seeking a free deployment with OAuth, OIDC, SAML, directory integration, and policy controls should find the feature set relevant, while teams needing only a narrow OAuth layer may prefer a simpler product. Casdoor is the stronger fit for self-hosted identity projects than for buyers looking for a managed service experience.
Casdoor pros and cons
- Where it wins
- OAuth 2.0, OpenID Connect, SAML, LDAP, and SCIM support
- Includes token introspection, machine-to-machine auth, MFA, and WebAuthn
- REST API, SDK integration, policies, and application management
- Where it doesn't
- Self-hosted deployment requires an organization-managed environment
- Its listed integrations are narrower than its protocol coverage
- The broad identity feature set may exceed simple OAuth-only needs
Casdoor fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update